This is between a bug and a new feature.
Customer would like to log (audit) all the login attempts via the CIFS, FTP and Web clients to the alfresco store
In the current version of alfresco we can only audit web UI logins.
We only audit logins via our public services.
CIFS does not authenticate this way.
We would have to add some CIFS specific auditing for authentication.
Other SSO routes may also not log access (filters for NTLM, Kerberos, HTTP)